CVE-2025-59093

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from the registry. This allows an attacker t...

CVE-2025-59093: Reliance on Security Through Obscurity

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from the registry. This allows an attacker t...

PT-2025-42880

Name of the Vulnerable Software and Affected Versions WorkExaminer versions affected versions not specified Description An unauthenticated attacker gaining access to TCP port 12306 of the WorkExaminer server can bypass the login prompt due to missing server-side authentication checks. This allows...

CVE-2025-10640: Client-Side Enforcement of Server-Side Security

An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive...

CVE-2025-11177

The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

EUVD-2025-34559

The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

cn.crudapi:crudapi (>=0.0.1, <=0.0.5), com.alibaba.ververica:ververica-connector-jdbc (>=1.17-vvr-8.0.11-4, <=1.20-vvr-11.9.0-jdk11) +234 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=10.2.0.jre8, <=10.2.3.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =10.2.0.jre8, =0.0.1, =1.17-vvr-8.0.11-4, =2.9.5, =2.9.5, =2.8.12, =6.5.0, =1.0.0, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.6.2, =2.7.30 and more Source cves: CVE-2025-59250 Source advisory: SNYK:JAVA-COMMICROSOFTSQLSERVER-13821835...

cl.kanopus.tool:ktool-deploy-sql (1.0.0), cl.kanopus.util:klib-deploy-sql (3.0.0) +109 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.10.0.jre11, <=12.10.2.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.10.0.jre11, =0.7.0, =0.7.0, =1.25.2, =4.4.4, =0.0.9, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59250 Source advisory: OSV:GHSA-M494-W24Q-6F7W...

com.codestepfish:vline-sql-server-mssql (>=2.0.5, <=2.1.1), com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver (>=1.26.1, <=1.27.1) +87 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=13.1.0.jre11-preview, <=13.2.0.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =13.1.0.jre11-preview, =2.0.5, =1.26.1, =5.4.4-26.4, =1.0.2, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.0.alpha1, =1.0.0, =2.1.1, =2.2.1 and more Source cves: CVE-2025-59250 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.10.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.10.0, <=6.10.5) +71 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (12.2.0.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version 12.2.0.jre11 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.sqlserver:mssql-jdbc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.10.0, =6.10.0, =6.10.0, =6.10.0, =0.7.6,...

com.codestepfish:vline-sql-server-mssql (>=2.0.5, <=2.1.1), com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver (>=1.28.0, <=1.28.1) +91 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=13.2.0.jre11, <=13.2.1.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =13.2.0.jre11, =2.0.5, =1.28.0, =2.1.2, =2.1.2, =2.1.2, =5.4.4-26.4, =1.0.2, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.3.final and more Source cves: CVE-2025-59250 Source advisory: GHSA-M494-W24Q-6F7W...

africa.shuwari:doobie-sql-server_3 (0.1.0), be.ugent.idlab.knows:dataio (>=2.0.0, <=2.1.5) +162 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.6.0.jre11, <=12.6.4.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.6.0.jre11, =2.0.0, =1.7.0-beta1, =1.7.0-beta1, =1.2.0, =1.2.0, =1.2.0, =2.8.24, =0.6.1, =1.17.0, =4.0.4, =4.0.4, =0.9.0, =0.11.0 and more Source cves: CVE-2025-59250 Source advisory: GHSA-M494-W24Q-6F7W...

be.ugent.idlab.knows:dataio (>=1.2.0, <=1.3.1), com.arassec.igor:igor-plugin-data (>=0.6.5, <=0.6.8) +124 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=11.2.0.jre11, <=11.2.3.jre17)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =11.2.0.jre11, =1.2.0, =0.6.5, =0.6.5, =0.6.5, =9.0.0-alpha.25, =9.0.0, =0.0.5, =0.0.5, =0.0.8 and more Source cves: CVE-2025-59250 Source advisory: OSV:GHSA-M494-W24Q-6F7W...

cl.kanopus.tool:ktool-deploy-sql (1.0.0), cl.kanopus.util:klib-deploy-sql (3.0.0) +115 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.9.0.jre11-preview, <=12.10.1.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.9.0.jre11-preview, =0.7.0, =0.7.0, =1.24.0, =4.4.4, =0.0.9, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.9.6, =0.30.0 - com.stano:schema-installer-flyway 0.30.0 and more Source cves: CVE-2025-59250 Source advisory: SNYK:JAVA-COMMICROSOFTSQLSERVER-1382183...

africa.shuwari:doobie-sql-server_3 (0.1.1), com.facebook.presto:presto-spark-package (>=0.293, <=0.295) +201 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.7.0.jre11-preview, <=12.8.1.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.7.0.jre11-preview, =0.293, =0.293, =1.20.0, =1.2.1, =1.2.0, =1.0.0, =1.0.0, =2.12.0, =4.1.10, =3.15.0, =3.15.1, =3.15.1, =3.15.1, =3.16.1 and more Source cves: CVE-2025-59250 Source advisory: SNYK:JAVA-COMMICROSOFTSQLSERVER-13821835...

africa.shuwari:doobie-sql-server_3 (0.1.1), com.facebook.presto:presto-spark-package (>=0.293, <=0.295) +196 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.8.0.jre11, <=12.8.2.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.8.0.jre11, =0.293, =0.293, =1.21.0, =2.12.0, =4.1.10, =3.13.6, =3.13.6, =3.15.1, =3.15.1, =3.13.6, =3.17.0, =3.16.0, =3.13.6, =3.19.1 - com.scalar-labs:scalardb-saga-core 3.19.0-alpha.1 and more Source cves: CVE-2025-59250 Source advisory:...

com.codestepfish:vline-sql-server-mssql (>=2.0.5, <=2.1.1), com.google.cloud.sql:cloud-sql-connector-jdbc-sqlserver (>=1.28.0, <=1.28.1) +91 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=13.2.0.jre11, <=13.2.1.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =13.2.0.jre11, =2.0.5, =1.28.0, =2.1.2, =2.1.2, =2.1.2, =5.4.4-26.4, =1.0.2, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.1.5, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.0.alpha2, =3.4.3.final and more Source cves: CVE-2025-59250 Source advisory:...

cl.kanopus.tool:ktool-deploy-sql (1.0.0), cl.kanopus.util:klib-deploy-sql (3.0.0) +109 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.10.0.jre11, <=12.10.2.jre8)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.10.0.jre11, =0.7.0, =0.7.0, =1.25.2, =4.4.4, =0.0.9, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-59250 Source advisory: GHSA-M494-W24Q-6F7W...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.10.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.10.0, <=6.10.5) +71 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (12.2.0.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version 12.2.0.jre11 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.sqlserver:mssql-jdbc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.10.0, =6.10.0, =6.10.0, =6.10.0, =0.7.6,...

africa.shuwari:doobie-sql-server_3 (0.1.0), be.ugent.idlab.knows:dataio (>=2.0.0, <=2.1.5) +162 more potentially affected by CVE-2025-59250 via com.microsoft.sqlserver:mssql-jdbc (>=12.6.0.jre11, <=12.6.4.jre11)

com.microsoft.sqlserver:mssql-jdbc MAVEN version =12.6.0.jre11, =2.0.0, =1.7.0-beta1, =1.7.0-beta1, =1.2.0, =1.2.0, =1.2.0, =2.8.24, =0.6.1, =1.17.0, =4.0.4, =4.0.4, =0.9.0, =0.11.0 and more Source cves: CVE-2025-59250 Source advisory: OSV:GHSA-M494-W24Q-6F7W...